[THIN] Re: ********Virus Problems************
- From: Danny <nocmonkey@xxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Thu, 18 Aug 2005 18:32:44 -0400
On 8/18/05, Stratton, Doug MSER:EX <Doug.M.Stratton@xxxxxxxxx> wrote:
>
>
> Some of our w2k mfpsv3 servers got the esbot infection.
>
> Part of the clean up is to set
> 5. Check if removal tool did this already - Modify the registry key
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa and
> set "restrictanonymous" = "0"
>
> I don't know much about this but was wondering if any of you have done this
> and not had any problems?
>
> It is currently 1 on all our servers including the ones infected.
Depends on your envrionment; do you have any NT 4.0 Servers?
http://online.securityfocus.com/infocus/1352
...D
--
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer
********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
